Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/94be0957-4902-3d52-9cb2-75ddb5ff2092.roa
File:                     94be0957-4902-3d52-9cb2-75ddb5ff2092.roa (raw, json)
Hash identifier:          1f7dhTgS/C0OEX7kcLMOobrcM8vSB4Yn+CARenALhwY=
Subject key identifier:   14:E8:34:7A:F6:A0:B6:EB:1B:59:2D:93:4A:B9:03:4D:22:9D:97:7E
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FAE223AEC2E88331BA800
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/94be0957-4902-3d52-9cb2-75ddb5ff2092.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        136.226.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ae:22:3a:ec:2e:88:33:1b:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=0aedf3aa-a2fe-48e5-b376-395e1533e53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:9e:8e:f9:27:a3:b9:55:f0:53:95:a6:56:
                    d0:8f:ad:de:4e:02:dc:fc:8d:05:ad:11:2c:4e:07:
                    82:7e:9b:c4:c5:74:24:27:ce:56:a8:fb:42:b9:9d:
                    62:d0:e2:b0:15:8f:aa:22:99:21:52:6f:d5:a8:0d:
                    41:cf:b3:16:9c:89:c5:01:96:bc:49:80:51:83:84:
                    ad:8d:e5:34:8d:39:4f:e2:2e:38:7e:30:55:d2:83:
                    d1:7a:8b:86:1b:89:03:37:22:35:c5:cb:20:c2:85:
                    08:09:6c:89:2b:72:ee:aa:cc:13:b7:0e:73:da:0b:
                    24:c9:5e:43:f0:3b:30:1a:97:76:3a:32:73:58:97:
                    82:6b:97:6b:01:8f:d7:ef:c4:04:7e:f2:8b:26:f2:
                    52:88:4c:bf:e2:85:0f:7f:95:71:6f:bf:a2:be:d9:
                    f6:2a:cc:0b:5f:02:0b:58:8c:a8:18:c6:88:ef:74:
                    d9:95:ec:c7:b6:70:06:40:24:bb:95:ad:1f:88:d0:
                    c9:9f:40:31:59:39:e7:38:a8:bf:63:db:9e:fe:87:
                    9e:9e:c6:9f:5e:35:29:ff:77:11:0b:a1:e6:ba:43:
                    3e:06:44:f4:46:99:36:f5:50:ed:00:eb:67:6a:04:
                    34:14:40:e4:f7:48:70:57:db:7f:a9:85:97:ef:0d:
                    a9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E8:34:7A:F6:A0:B6:EB:1B:59:2D:93:4A:B9:03:4D:22:9D:97:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/94be0957-4902-3d52-9cb2-75ddb5ff2092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a9:3d:7a:cf:6c:a7:ff:41:b7:8e:d2:40:75:93:a1:04:67:
         a4:0d:1d:62:8d:66:86:98:0e:f1:97:69:40:c0:74:70:11:3e:
         18:1c:6e:16:9e:cc:07:1e:0f:58:18:fa:e0:c8:82:9c:fc:4c:
         2d:ca:6b:61:da:92:15:d0:1f:1c:03:99:72:8f:0c:66:47:c2:
         10:1b:1b:a5:2f:8f:1c:0d:a6:ad:f9:38:d1:0f:04:2f:86:a2:
         89:ed:ac:4f:e9:e5:f1:be:96:13:0b:a2:b4:31:d9:8f:0c:20:
         4d:79:da:d4:40:9d:2d:dd:e6:0e:a5:f0:fa:6c:24:33:a2:97:
         63:3e:5e:ed:c1:18:ca:ef:fd:ea:11:fd:f8:34:14:6a:50:2b:
         1b:bf:94:ac:2f:55:62:8b:35:b3:ac:aa:cc:b0:cb:66:38:a0:
         24:62:c1:51:c6:3c:dd:52:bc:e1:45:fb:c0:54:19:f0:b4:a5:
         f7:d3:0e:f3:37:9a:49:e4:4a:4d:43:4a:95:c3:f4:13:04:9f:
         66:a1:76:c7:3d:8c:0e:71:a6:ee:90:4f:bf:11:ae:cc:a5:0d:
         9d:65:42:48:aa:e1:5b:78:24:87:2f:b6:68:3a:07:d2:7d:b8:
         cd:8f:72:e7:ef:67:d9:3c:a4:16:bf:9b:c4:a9:19:36:9d:f8:
         61:a8:3e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:28 2026 by rpki-client